Phishing kits are a new clique in the cybercrime economy hallways. These products have entire communities of developers and buyers that operate like a SaaS company. This session will review a year’s worth of phishing kit research, outlining organized crime groups behind these kits and presenting a new tool called PhishPond, which is an open source phishing kit detection and analysis tool.